In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-22404 |
Exploitation
The vulnerability can be exploited locally without any user interaction, allowing an attacker to execute arbitrary code on the affected system. This can be achieved by triggering the use after free condition in the avct_lcb_msg_ind function.
Affected Products
- Android Bluetooth Module: Vulnerable to arbitrary code execution due to the use after free issue.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Android. Users should ensure their devices are running the most recent software version to protect against potential exploits.